CWE-416 · Use After Free (page 51)
Page 51 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1199 | High | 7.5 | 2022-08-29 | A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a nu… |
CVE-2022-1198 | Medium | 5.5 | 2022-08-29 | A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 devic… |
CVE-2022-1184 | Medium | 5.5 | 2022-08-29 | A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a u… |
CVE-2022-1043 | High | 8.8 | 2022-08-29 | A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or… |
CVE-2022-0934 | High | 7.5 | 2022-08-29 | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, pote… |
CVE-2021-41785 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41784 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41783 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41782 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41781 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41780 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2022-3016 | High | 7.8 | 2022-08-28 | Use After Free in GitHub repository vim/vim prior to 9.0.0286. |
CVE-2022-0216 | Medium | 4.4 | 2022-08-26 | A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cance… |
CVE-2022-2982 | High | 7.8 | 2022-08-25 | Use After Free in GitHub repository vim/vim prior to 9.0.0260. |
CVE-2021-3929 | High | 8.2 | 2022-08-25 | A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reent… |
CVE-2022-32746 | Medium | 5.4 | 2022-08-25 | A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resu… |
CVE-2021-4022 | Medium | 5.5 | 2022-08-25 | A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it cause… |
CVE-2022-2978 | High | 7.8 | 2022-08-24 | A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to fun… |
CVE-2021-4028 | High | 7.8 | 2022-08-24 | A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a… |
CVE-2022-20122 | Critical | 9.8 | 2022-08-24 | The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU… |
CVE-2021-39815 | Critical | 9.8 | 2022-08-24 | The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU… |
CVE-2022-2938 | High | 7.8 | 2022-08-23 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to cr… |
CVE-2021-3975 | Medium | 6.5 | 2022-08-23 | A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being… |
CVE-2022-2946 | High | 7.8 | 2022-08-23 | Use After Free in GitHub repository vim/vim prior to 9.0.0246. |
CVE-2022-38667 | Critical | 9.8 | 2022-08-22 | HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP parser supports HT… |
CVE-2022-23459 | High | 8.1 | 2022-08-19 | Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a… |
CVE-2022-2889 | High | 7.8 | 2022-08-19 | Use After Free in GitHub repository vim/vim prior to 9.0.0225. |
CVE-2022-35164 | Critical | 9.8 | 2022-08-18 | LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. |
CVE-2022-2862 | High | 7.8 | 2022-08-17 | Use After Free in GitHub repository vim/vim prior to 9.0.0221. |
CVE-2022-36190 | Critical | 9.8 | 2022-08-17 | GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242. |
CVE-2022-36149 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry(). |
CVE-2022-2817 | High | 7.8 | 2022-08-15 | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
CVE-2022-2621 | High | 8.8 | 2022-08-12 | Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-2614 | High | 8.8 | 2022-08-12 | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2613 | High | 8.8 | 2022-08-12 | Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interacti… |
CVE-2022-2606 | High | 8.8 | 2022-08-12 | Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise po… |
CVE-2022-2604 | High | 8.8 | 2022-08-12 | Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-2603 | High | 8.8 | 2022-08-12 | Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-29117 | High | 7.8 | 2022-08-12 | A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbit… |
CVE-2022-20325 | High | 7.8 | 2022-08-12 | In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2022-20306 | Medium | 6.7 | 2022-08-12 | In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution p… |
CVE-2022-35675 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbit… |
CVE-2022-35670 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-35665 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34263 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code exe… |
CVE-2022-20379 | Medium | 6.7 | 2022-08-11 | In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege w… |
CVE-2022-20372 | Medium | 6.7 | 2022-08-11 | In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System exec… |
CVE-2022-20158 | Medium | 6.7 | 2022-08-11 | In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege… |
CVE-2022-34707 | High | 7.8 | 2022-08-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-34705 | High | 7.8 | 2022-08-09 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-1973 | High | 7.1 | 2022-08-05 | A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the syste… |
CVE-2022-1158 | High | 7.8 | 2022-08-05 | A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are… |
CVE-2022-32293 | High | 8.1 | 2022-08-03 | In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes… |
CVE-2022-34568 | High | 7.5 | 2022-07-28 | SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. |
CVE-2022-2399 | High | 8.8 | 2022-07-28 | Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2481 | High | 8.8 | 2022-07-28 | Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to pote… |
CVE-2022-2480 | High | 8.8 | 2022-07-28 | Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2022-2478 | High | 8.8 | 2022-07-28 | Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2477 | High | 8.8 | 2022-07-28 | Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2022-2296 | High | 8.8 | 2022-07-28 | Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific us… |
CVE-2022-2163 | High | 8.8 | 2022-07-28 | Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to pot… |
CVE-2022-2161 | High | 8.8 | 2022-07-28 | Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interacti… |
CVE-2022-2158 | High | 8.8 | 2022-07-28 | Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2157 | High | 8.8 | 2022-07-28 | Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exp… |
CVE-2022-2156 | High | 8.8 | 2022-07-28 | Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2011 | High | 8.8 | 2022-07-28 | Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2007 | High | 8.8 | 2022-07-28 | Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1919 | High | 8.8 | 2022-07-28 | Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1870 | High | 8.8 | 2022-07-27 | Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2022-1866 | High | 8.8 | 2022-07-27 | Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user in… |
CVE-2022-1865 | High | 8.8 | 2022-07-27 | Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
CVE-2022-1864 | High | 8.8 | 2022-07-27 | Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentia… |
CVE-2022-1863 | High | 8.8 | 2022-07-27 | Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-1861 | High | 8.8 | 2022-07-27 | Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interac… |
CVE-2022-1860 | High | 8.8 | 2022-07-27 | Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user… |
CVE-2022-1859 | High | 8.8 | 2022-07-27 | Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interac… |
CVE-2022-1856 | High | 8.8 | 2022-07-27 | Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-1855 | High | 8.8 | 2022-07-27 | Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1854 | High | 8.8 | 2022-07-27 | Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1853 | Critical | 9.6 | 2022-07-27 | Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-1641 | High | 8.8 | 2022-07-26 | Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific… |
CVE-2022-1640 | High | 8.8 | 2022-07-26 | Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to poten… |
CVE-2022-1639 | High | 8.8 | 2022-07-26 | Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1636 | High | 8.8 | 2022-07-26 | Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-1635 | High | 8.8 | 2022-07-26 | Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactio… |
CVE-2022-1634 | High | 8.8 | 2022-07-26 | Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to… |
CVE-2022-1633 | High | 8.8 | 2022-07-26 | Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI inter… |
CVE-2022-1496 | High | 8.8 | 2022-07-26 | Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct… |
CVE-2022-1493 | High | 8.8 | 2022-07-26 | Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct us… |
CVE-2022-1491 | High | 8.8 | 2022-07-26 | Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct us… |
CVE-2022-1490 | High | 8.8 | 2022-07-26 | Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interactio… |
CVE-2022-1487 | High | 7.5 | 2022-07-26 | Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test. |
CVE-2022-1485 | High | 7.5 | 2022-07-26 | Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-1481 | High | 8.8 | 2022-07-26 | Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction… |
CVE-2022-1479 | High | 8.8 | 2022-07-26 | Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1478 | High | 8.8 | 2022-07-26 | Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1477 | High | 8.8 | 2022-07-26 | Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-33468 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33467 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33462 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c. |